Cloudmersive

Cloudmersive Text Input API

Text Input operations of the Cloudmersive Validate API — 8 operation(s) served from https://api.cloudmersive.com and authenticated with the Apikey header. One Cloudmersive API key grants access to every API in the portfolio.

Documentation GitHub OpenAPI

Operations 8

POST /validate/text-input/check/sql-injection Check text input for SQL Injection (SQLI) attacks #

POST /validate/text-input/check/sql-injection/batch Check and protect multiple text inputs for SQL Injection (SQLI) attacks in batch #

POST /validate/text-input/check/xss Check text input for Cross-Site-Scripting (XSS) attacks #

POST /validate/text-input/protect/xss Protect text input from Cross-Site-Scripting (XSS) attacks through normalization #

POST /validate/text-input/check-and-protect/xss/batch Check and protect multiple text inputs for Cross-Site-Scripting (XSS) attacks… #

POST /validate/text-input/html/check/ssrf Protect html input from Server-side Request Forgery (SSRF) attacks #

POST /validate/text-input/check/xxe Protect text input from XML External Entity (XXE) attacks #

POST /validate/text-input/check/xxe/batch Protect text input from XML External Entity (XXE) attacks #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this

find_apisBrowse and filter every API in the catalog.
get_api_artifactsOne API's artifacts, grouped by type.
get_openapiThe primary OpenAPI for this API.
find_similar_apisAPIs that look like this one.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This API

curl "https://apis.io/api/v1/apis/cloudmersive:cloudmersive-textinput-api"

All apis

curl "https://apis.io/api/v1/apis?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

openapi: 3.2.0
info:
  version: v1
  title: validateapi Text Input API
  description: The validation APIs help you validate data. Check if an E-mail address is real. Check if a domain is real. Check up on an IP address, and even where it is located. All this and much more is available in the validation API.
servers:
- url: http://localhost
tags:
- name: TextInput
paths:
  /validate/text-input/check/sql-injection:
    post:
      tags:
      - TextInput
      summary: Check text input for SQL Injection (SQLI) attacks
      description: Detects SQL Injection (SQLI) attacks from text input.
      operationId: TextInput_CheckSqlInjection
      parameters:
      - name: detectionLevel
        in: header
        description: Set to Normal to target a high-security SQL Injection detection level with a very low false positive rate; select High to target a very-high security SQL Injection detection level with higher false positives.  Default is Normal (recommended).
        required: false
        schema:
          type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SqlInjectionDetectionResult'
            text/json:
              schema:
                $ref: '#/components/schemas/SqlInjectionDetectionResult'
            application/xml:
              schema:
                $ref: '#/components/schemas/SqlInjectionDetectionResult'
            text/xml:
              schema:
                $ref: '#/components/schemas/SqlInjectionDetectionResult'
      security:
      - Apikey: []
      requestBody:
        content:
          application/json:
            schema:
              type: string
          text/json:
            schema:
              type: string
        description: User-facing text input.
        required: true
  /validate/text-input/check/sql-injection/batch:
    post:
      tags:
      - TextInput
      summary: Check and protect multiple text inputs for SQL Injection (SQLI) attacks in batch
      description: Detects SQL Injection (SQLI) attacks from multiple text inputs. Output preverses order of input items.
      operationId: TextInput_CheckSqlInjectionBatch
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SqlInjectionCheckBatchResponse'
            text/json:
              schema:
                $ref: '#/components/schemas/SqlInjectionCheckBatchResponse'
            application/xml:
              schema:
                $ref: '#/components/schemas/SqlInjectionCheckBatchResponse'
            text/xml:
              schema:
                $ref: '#/components/schemas/SqlInjectionCheckBatchResponse'
      security:
      - Apikey: []
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/SqlInjectionCheckBatchRequest'
          text/json:
            schema:
              $ref: '#/components/schemas/SqlInjectionCheckBatchRequest'
        description: User-facing text input.
        required: true
  /validate/text-input/check/xss:
    post:
      tags:
      - TextInput
      summary: Check text input for Cross-Site-Scripting (XSS) attacks
      description: Detects XSS (Cross-Site-Scripting) attacks from text input.
      operationId: TextInput_CheckXss
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/XssProtectionResult'
            text/json:
              schema:
                $ref: '#/components/schemas/XssProtectionResult'
            application/xml:
              schema:
                $ref: '#/components/schemas/XssProtectionResult'
            text/xml:
              schema:
                $ref: '#/components/schemas/XssProtectionResult'
      security:
      - Apikey: []
      requestBody:
        content:
          application/json:
            schema:
              type: string
          text/json:
            schema:
              type: string
        description: User-facing text input.
        required: true
  /validate/text-input/protect/xss:
    post:
      tags:
      - TextInput
      summary: Protect text input from Cross-Site-Scripting (XSS) attacks through normalization
      description: Detects and removes XSS (Cross-Site-Scripting) attacks from text input through normalization. Returns the normalized result, as well as information on whether the original input contained an XSS risk.
      operationId: TextInput_ProtectXss
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/XssProtectionResult'
            text/json:
              schema:
                $ref: '#/components/schemas/XssProtectionResult'
            application/xml:
              schema:
                $ref: '#/components/schemas/XssProtectionResult'
            text/xml:
              schema:
                $ref: '#/components/schemas/XssProtectionResult'
      security:
      - Apikey: []
      requestBody:
        content:
          application/json:
            schema:
              type: string
          text/json:
            schema:
              type: string
        description: User-facing text input.
        required: true
  /validate/text-input/check-and-protect/xss/batch:
    post:
      tags:
      - TextInput
      summary: Check and protect multiple text inputs for Cross-Site-Scripting (XSS) attacks…
      description: Detects XSS (Cross-Site-Scripting) attacks from multiple text inputs. Output preverses order of input items.
      operationId: TextInput_CheckXssBatch
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/XssProtectionBatchResponse'
            text/json:
              schema:
                $ref: '#/components/schemas/XssProtectionBatchResponse'
            application/xml:
              schema:
                $ref: '#/components/schemas/XssProtectionBatchResponse'
            text/xml:
              schema:
                $ref: '#/components/schemas/XssProtectionBatchResponse'
      security:
      - Apikey: []
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/XssProtectionBatchRequest'
          text/json:
            schema:
              $ref: '#/components/schemas/XssProtectionBatchRequest'
        description: User-facing text input.
        required: true
  /validate/text-input/html/check/ssrf:
    post:
      tags:
      - TextInput
      summary: Protect html input from Server-side Request Forgery (SSRF) attacks
      description: Detects SSRF (Server-side request forgery) attacks and unsafe URL attacks from HTML text input, where attackers can attempt to access unsafe local or network paths in the server environment by injecting them into HTML.
      operationId: TextInput_CheckHtmlSsrf
      parameters:
      - name: allowCidScheme
        in: header
        description: 'Optional: Set to true to allow cid: scheme URLs for email message attachments.  Default is false.'
        required: false
        schema:
          type: boolean
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HtmlSsrfDetectionResult'
            text/json:
              schema:
                $ref: '#/components/schemas/HtmlSsrfDetectionResult'
            application/xml:
              schema:
                $ref: '#/components/schemas/HtmlSsrfDetectionResult'
            text/xml:
              schema:
                $ref: '#/components/schemas/HtmlSsrfDetectionResult'
      security:
      - Apikey: []
      requestBody:
        content:
          application/json:
            schema:
              type: string
          text/json:
            schema:
              type: string
        description: User-facing HTML input.
        required: true
  /validate/text-input/check/xxe:
    post:
      tags:
      - TextInput
      summary: Protect text input from XML External Entity (XXE) attacks
      description: Detects XXE (XML External Entity) attacks from text input.
      operationId: TextInput_CheckXxe
      parameters:
      - name: allowInternetUrls
        in: header
        description: 'Optional: Set to true to allow Internet-based dependency URLs for DTDs and other XML External Entitites, set to false to block.  Default is false.'
        required: false
        schema:
          type: boolean
      - name: knownSafeUrls
        in: header
        description: 'Optional: Comma separated list of fully-qualified URLs that will automatically be considered safe.'
        required: false
        schema:
          type: string
      - name: knownUnsafeUrls
        in: header
        description: 'Optional: Comma separated list of fully-qualified URLs that will automatically be considered unsafe.'
        required: false
        schema:
          type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/XxeDetectionResult'
            text/json:
              schema:
                $ref: '#/components/schemas/XxeDetectionResult'
            application/xml:
              schema:
                $ref: '#/components/schemas/XxeDetectionResult'
            text/xml:
              schema:
                $ref: '#/components/schemas/XxeDetectionResult'
      security:
      - Apikey: []
      requestBody:
        content:
          application/json:
            schema:
              type: string
          text/json:
            schema:
              type: string
        description: User-facing text input.
        required: true
  /validate/text-input/check/xxe/batch:
    post:
      tags:
      - TextInput
      summary: Protect text input from XML External Entity (XXE) attacks
      description: Detects XXE (XML External Entity) attacks from text input.
      operationId: TextInput_CheckXxeBatch
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/XxeDetectionBatchResponse'
            text/json:
              schema:
                $ref: '#/components/schemas/XxeDetectionBatchResponse'
            application/xml:
              schema:
                $ref: '#/components/schemas/XxeDetectionBatchResponse'
            text/xml:
              schema:
                $ref: '#/components/schemas/XxeDetectionBatchResponse'
      security:
      - Apikey: []
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/XxeDetectionBatchRequest'
          text/json:
            schema:
              $ref: '#/components/schemas/XxeDetectionBatchRequest'
        required: true
components:
  schemas:
    XxeDetectionRequestItem:
      description: Individual item to detect for XXE
      type: object
      properties:
        InputText:
          description: Individual input text item to protect from XXE
          type: string
        AllowInternetUrls:
          description: 'Optional: Set to true to allow Internet-based dependency URLs for DTDs and other XML External Entitites, set to false to block.  Default is false.'
          type: boolean
        KnownSafeUrls:
          description: 'Optional: Comma separated list of fully-qualified URLs that will automatically be considered safe.'
          type: array
          items:
            type: string
        KnownUnsafeUrls:
          description: 'Optional: Comma separated list of fully-qualified URLs that will automatically be considered unsafe.'
          type: array
          items:
            type: string
    XxeDetectionResult:
      description: Result of performing an XXE threat detection operation
      type: object
      properties:
        Successful:
          description: True if the operation was successful, false otherwise
          type: boolean
        ContainedXxe:
          description: True if the input contained XXE threats, false otherwise
          type: boolean
    SqlInjectionCheckBatchRequest:
      description: Input to a batch SQL Injection detection operation
      type: object
      properties:
        RequestItems:
          description: Multiple items to detect for SQL Injection
          type: array
          items:
            $ref: '#/components/schemas/SqlInjectionCheckRequestItem'
        DetectionLevel:
          description: Set to Normal to target a high-security SQL Injection detection level with a very low false positive rate; select High to target a very-high security SQL Injection detection level with higher false positives.  Default is Normal (recommended).
          type: string
    XxeDetectionBatchResponse:
      description: Result of performing a batch XXE detection operation
      type: object
      properties:
        ResultItems:
          description: Results from performing a batch XSS protection operation
          type: array
          items:
            $ref: '#/components/schemas/XxeDetectionResult'
    HtmlSsrfDetectionResult:
      description: Result of performing an XXE threat detection operation
      type: object
      properties:
        Successful:
          description: True if the operation was successful, false otherwise
          type: boolean
        ContainedThreats:
          description: True if the input contained SSRF threats, false otherwise
          type: boolean
    SqlInjectionCheckRequestItem:
      description: Individual item to protect for SQL Injection
      type: object
      properties:
        InputText:
          description: Individual input text item to check for SQL Injection
          type: string
    SqlInjectionCheckBatchResponse:
      description: Result of performing a batch XSS protection operation
      type: object
      properties:
        ResultItems:
          description: Results from performing a batch SQL Injection detection operation; order is preserved from input data
          type: array
          items:
            $ref: '#/components/schemas/SqlInjectionDetectionResult'
    XssProtectionBatchResponse:
      description: Result of performing a batch XSS protection operation
      type: object
      properties:
        ResultItems:
          description: Results from performing a batch XSS protection operation
          type: array
          items:
            $ref: '#/components/schemas/XssProtectionResult'
    XxeDetectionBatchRequest:
      description: Input to a batch XXE detection operation
      type: object
      properties:
        RequestItems:
          description: Multiple items to protect for XXE
          type: array
          items:
            $ref: '#/components/schemas/XxeDetectionRequestItem'
    XssProtectionRequestItem:
      description: Individual item to protect for XSS
      type: object
      properties:
        InputText:
          description: Individual input text item to protect from XSS
          type: string
    XssProtectionBatchRequest:
      description: Input to a batch XSS protection operation
      type: object
      properties:
        RequestItems:
          description: Multiple items to protect for XSS
          type: array
          items:
            $ref: '#/components/schemas/XssProtectionRequestItem'
    XssProtectionResult:
      description: Result of performing an XSS protection operation
      type: object
      properties:
        Successful:
          description: True if the operation was successful, false otherwise
          type: boolean
        ContainedXss:
          description: True if the input contained XSS scripting, false otherwise
          type: boolean
        OriginalInput:
          description: Original input string
          type: string
        NormalizedResult:
          description: Normalized string result, with XSS removed
          type: string
    SqlInjectionDetectionResult:
      description: Result of performing an SQL Injection protection operation
      type: object
      properties:
        Successful:
          description: True if the operation was successful, false otherwise
          type: boolean
        ContainedSqlInjectionAttack:
          description: True if the input contained SQL Injection attacks, false otherwise
          type: boolean
        OriginalInput:
          description: Original input string
          type: string
  securitySchemes:
    Apikey:
      type: apiKey
      description: API Key Authentication
      name: Apikey
      in: header
x-provenance:
  method: harvested
  publisher: Cloudmersive
  source: https://api.cloudmersive.com/validate/docs/v1/swagger
  note: split by refine-openapis from the provider's own published document, verified by fetch (openapi/_original/*.fetch.json);
    stamped by stamp-openapi-provenance.py (roadmap#793)